CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b2209c3939570994cab66ce48e5e69e5_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b2209c3939570994cab66ce48e5e69e5_JaffaCakes118
Size
89KB
MD5
b2209c3939570994cab66ce48e5e69e5
SHA1
2723600deb1fe8dbb3250a7ab15b33ed9f6e2a92
SHA256
0901a85cc7b384a0ad65ea2db9e1b5ded56e3745c66d8409261f00bc265a0f8e
SHA512
dc93fbf24e7d82f20f5b944cca1930666a186959aebbbae498808a406208db6a77684e10fdea5972cabce4a7629e390671f26a620f283e12ed667d09b90843e5
SSDEEP
1536:/xLK2OReR3CHxhCJCjOFC9Q/IDBKklX9jdm1drwy/m4+m+O9Ph:ZVOReRyHPeCmIttCqy/m4+lOhh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b2209c3939570994cab66ce48e5e69e5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE